Split off a runtime spawner which can run in a chroot jail

[carlos8f]

Ideally the app processes can be jailed and not have access to compilers or write permissions to the app files. This will involve splitting the drone into two processes: a deployment bot and a runtime spawner. The deployment bot will be outside the jail but not listening on public ports.